Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3234332e302f32342d3234203d3e203134373935.roa
File:                     3136312e3133312e3234332e302f32342d3234203d3e203134373935.roa (raw, json)
Hash identifier:          NbPp9+Th2N0EsxxxnDjQHzfd2YjaMwquNHVt4HHQSaQ=
Subject key identifier:   A8:AE:60:F2:17:6E:99:7D:A3:F8:80:E2:C3:01:4B:87:88:8B:20:85
Certificate issuer:       /CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
Certificate serial:       57BAF17D5E801D1B30EC7C9CE7192ADCC79797CB
Authority key identifier: F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3234332e302f32342d3234203d3e203134373935.roa
Signing time:             Tue 04 Feb 2025 20:03:09 +0000
ROA not before:           Tue 04 Feb 2025 19:58:09 +0000
ROA not after:            Tue 03 Feb 2026 20:03:09 +0000
asID:                     14795
IP address blocks:        161.131.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ba:f1:7d:5e:80:1d:1b:30:ec:7c:9c:e7:19:2a:dc:c7:97:97:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
        Validity
            Not Before: Feb  4 19:58:09 2025 GMT
            Not After : Feb  3 20:03:09 2026 GMT
        Subject: CN=A8AE60F2176E997DA3F880E2C3014B87888B2085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:51:71:64:6a:a8:63:8b:25:11:f5:ed:a0:
                    8d:87:6f:7f:96:24:a7:b7:77:2c:f7:db:c7:60:55:
                    1d:86:97:ad:4a:f6:7b:80:88:0f:2e:02:8a:a5:ed:
                    dc:c2:7b:22:3f:33:1e:0f:ee:18:5d:40:08:df:b4:
                    3f:3a:c0:59:9f:d2:17:0c:ae:f8:3a:d7:f0:84:f8:
                    46:48:bf:c9:e5:8c:85:c8:78:96:06:e5:aa:39:a5:
                    1d:9b:b6:8d:f2:aa:ab:cd:71:bf:3d:d7:04:2c:70:
                    b5:93:ad:23:d8:7c:4d:65:78:5a:6e:94:6f:c9:cb:
                    ea:46:d1:77:33:d0:b9:ea:85:4b:a5:31:81:84:a5:
                    d9:b0:8a:66:99:87:ee:a7:06:16:65:61:1f:a1:0a:
                    7d:7d:42:91:d0:ae:33:10:18:77:51:12:ec:e0:78:
                    9a:e4:c3:ac:b5:de:af:b4:ca:e6:1e:12:37:16:b0:
                    58:8e:55:0c:58:14:0c:54:e3:a9:f7:d7:4b:04:5f:
                    94:47:90:36:d3:c6:39:4d:51:31:af:77:33:25:51:
                    89:0d:6b:0d:a0:bc:92:33:5b:86:23:b4:81:f2:c1:
                    8b:14:85:01:b0:7b:77:a5:07:b7:2f:00:f8:cf:39:
                    6d:f1:ac:49:8d:6e:0d:00:77:f2:87:ef:81:09:8e:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AE:60:F2:17:6E:99:7D:A3:F8:80:E2:C3:01:4B:87:88:8B:20:85
            X509v3 Authority Key Identifier:
                keyid:F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3234332e302f32342d3234203d3e203134373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e7:26:38:04:93:ec:dc:f9:ad:b1:81:39:6e:5b:c4:d4:a1:
         f4:87:69:9b:24:3f:73:5f:66:a4:02:cd:15:18:0b:bf:57:f2:
         80:60:b5:15:c8:81:2c:e2:4e:d1:b2:50:e6:43:d7:99:78:5e:
         e4:fe:f7:44:20:02:6f:a1:51:c9:e5:0b:44:ec:40:19:68:29:
         f9:4e:fb:e0:ec:6b:6e:ff:91:c6:0b:c2:86:d8:b6:19:eb:13:
         88:4e:8f:f6:93:ce:d0:e3:a2:5d:34:7d:09:bb:ac:af:00:49:
         9b:16:0e:b7:dd:c3:00:7b:3c:4e:ac:de:db:50:2a:22:9a:10:
         49:e9:80:9f:47:4d:50:71:69:15:4a:ff:37:b7:ba:04:18:87:
         e7:8f:1e:ad:9b:49:7a:6a:d0:ca:2a:4d:10:ff:fa:40:dc:ba:
         ec:38:59:4f:7b:c3:87:17:d7:c3:71:38:ca:96:88:64:a0:19:
         7f:1f:52:d6:df:ef:38:26:ed:9c:8d:ab:eb:d8:dc:05:ba:8f:
         4e:ad:8a:38:57:37:7c:ca:2d:10:40:6a:d6:f0:09:15:33:b1:
         87:0d:99:5e:bc:b9:90:f6:1e:26:95:40:03:a4:76:24:e5:cd:
         3a:fb:d3:d7:86:6b:87:33:8f:07:5a:1c:64:7b:82:ea:55:46:
         4e:88:0e:56
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUV7rxfV6AHRsw7Hyc5xkq3MeXl8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk3RUNGODNEMUFENzJBRERCRTc0ODEzQ0YzNDBGMUU1
QkRBMDIzOTAeFw0yNTAyMDQxOTU4MDlaFw0yNjAyMDMyMDAzMDlaMDMxMTAvBgNV
BAMTKEE4QUU2MEYyMTc2RTk5N0RBM0Y4ODBFMkMzMDE0Qjg3ODg4QjIwODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1YVFxZGqoY4slEfXtoI2Hb3+W
JKe3dyz328dgVR2Gl61K9nuAiA8uAoql7dzCeyI/Mx4P7hhdQAjftD86wFmf0hcM
rvg61/CE+EZIv8nljIXIeJYG5ao5pR2bto3yqqvNcb891wQscLWTrSPYfE1leFpu
lG/Jy+pG0Xcz0LnqhUulMYGEpdmwimaZh+6nBhZlYR+hCn19QpHQrjMQGHdREuzg
eJrkw6y13q+0yuYeEjcWsFiOVQxYFAxU46n310sEX5RHkDbTxjlNUTGvdzMlUYkN
aw2gvJIzW4YjtIHywYsUhQGwe3elB7cvAPjPOW3xrEmNbg0Ad/KH74EJjpBzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqK5g8hdumX2j+IDiwwFLh4iLIIUwHwYDVR0j
BBgwFoAU+X7Pg9Gtcq3b50gTzzQPHlvaAjkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzQ0QkNGRTA0OEUwRkFFMjBGQUJEQTc0NzYxNzBCMUVE
MUY4NkYwRDZENTk4NUFBOTNFMTFDOUNBODY4QjE5LzAvRjk3RUNGODNEMUFENzJB
RERCRTc0ODEzQ0YzNDBGMUU1QkRBMDIzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GOTdFQ0Y4M0QxQUQ3MkFEREJF
NzQ4MTNDRjM0MEYxRTVCREEwMjM5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjc0NEJDRkUwNDhFMEZBRTIwRkFCREE3NDc2MTcwQjFFRDFGODZGMEQ2
RDU5ODVBQTkzRTExQzlDQTg2OEIxOS8wLzMxMzYzMTJlMzEzMzMxMmUzMjM0MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYPz
MA0GCSqGSIb3DQEBCwUAA4IBAQCb5yY4BJPs3PmtsYE5blvE1KH0h2mbJD9zX2ak
As0VGAu/V/KAYLUVyIEs4k7RslDmQ9eZeF7k/vdEIAJvoVHJ5QtE7EAZaCn5Tvvg
7Gtu/5HGC8KG2LYZ6xOITo/2k87Q46JdNH0Ju6yvAEmbFg633cMAezxOrN7bUCoi
mhBJ6YCfR01QcWkVSv83t7oEGIfnjx6tm0l6atDKKk0Q//pA3LrsOFlPe8OHF9fD
cTjKlohkoBl/H1LW3+84Ju2cjavr2NwFuo9OrYo4Vzd8yi0QQGrW8AkVM7GHDZle
vLmQ9h4mlUADpHYk5c06+9PXhmuHM48HWhxke4LqVUZOiA5W
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:11:36 2025 by rpki-client